> ## Documentation Index
> Fetch the complete documentation index at: https://docs.areawp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Comprehensive security suite — firewall, fail2ban, SSH keys, IP lists, malware scanner, file integrity, vulnerability scanner, and audit across 13 tabs.

<Info>
  **Path:** Security (`/security`) — Admin only

  The Security page is the central hub for all server security management. It uses a horizontal tab navigation with 13 dedicated sections.
</Info>

## Security Tabs

<AccordionGroup>
  <Accordion title="Overview" icon="gauge">
    Status display showing the overall security posture of the selected server. Includes a refresh button to pull the latest state.
  </Accordion>

  <Accordion title="Firewall (UFW)" icon="fire">
    Manage UFW firewall rules:

    * View all current rules (port, protocol, action, source)
    * Add inbound/outbound ALLOW or DENY rules
    * Delete rules
    * Enable/disable the firewall

    Default rules: ports 22, 80, 443 allowed; all others denied.
  </Accordion>

  <Accordion title="Fail2ban" icon="ban">
    Intrusion prevention configuration:

    * View active jails (SSH, Nginx, AreaWP auth, WordPress)
    * See currently banned IPs with ban time and reason
    * **Unban** an IP immediately
    * **Permanent Ban** — add to the permanent blocklist
    * Adjust thresholds: max retries, find time, ban duration
    * Add IPs to the ignore list (whitelist)
  </Accordion>

  <Accordion title="SSH Keys" icon="key">
    Manage authorized SSH keys for the server:

    * View all public keys with name and fingerprint
    * Add a new SSH key (paste public key)
    * Delete any key
    * Generate a new keypair from the panel
  </Accordion>

  <Accordion title="IP Lists" icon="list">
    Manage allowlists and blocklists:

    * **Allowlist** — IPs always permitted regardless of other rules
    * **Blocklist** — IPs permanently denied at the firewall level
    * Add single IPs or CIDR ranges to either list
  </Accordion>

  <Accordion title="Scanner" icon="magnifying-glass">
    Malware and file scanner — scans the server filesystem for:

    * Known malware signatures
    * Suspicious file patterns
    * PHP shell indicators
    * Results show affected files with severity and recommended action
  </Accordion>

  <Accordion title="Quarantine" icon="lock">
    Files flagged by the scanner appear here. Quarantine moves suspicious files to an isolated location without deleting them. Review and restore or permanently delete quarantined files.
  </Accordion>

  <Accordion title="Integrity" icon="shield-check">
    File integrity monitoring — detects unauthorized changes to critical system files and web app files:

    * Set a baseline snapshot
    * Compare current state against baseline
    * Shows modified, added, and deleted files with timestamps
  </Accordion>

  <Accordion title="Audit" icon="clipboard-list">
    Security audit runner — checks for common vulnerabilities and misconfigurations:

    * Open ports and unexpected services
    * Packages with outstanding security patches
    * World-writable files
    * Weak SSH configuration
    * Results are scored with actionable recommendations
  </Accordion>

  <Accordion title="Vulnerability" icon="triangle-exclamation">
    CVE and package vulnerability scanner — checks installed packages against known vulnerability databases. Shows CVE IDs, severity, and available patch versions.
  </Accordion>

  <Accordion title="Updates" icon="arrows-rotate">
    Auto-updates configuration — enable automatic security patch installation for:

    * OS packages (apt/dnf security updates)
    * AreaWP panel
    * Agent binary
    * Set maintenance window (day and time)
  </Accordion>

  <Accordion title="Events" icon="bell">
    Security event log — real-time feed of security-relevant system events:

    * Login successes and failures
    * sudo commands executed
    * Firewall rule hits
    * Fail2ban bans and unbans
    * File system changes (if integrity monitoring active)
  </Accordion>

  <Accordion title="Settings" icon="gear">
    Security configuration options:

    * Enable/disable individual security features
    * Set notification preferences for security events
    * Configure scan schedules
    * Security hardening presets (apply recommended settings)
  </Accordion>
</AccordionGroup>